WordPress.org

Ready to get started?Download WordPress

Forums

User Role Editor
Plugin not enforcing capability limits (2 posts)

  1. Bet Hannon
    Member
    Posted 6 months ago #

    The plugin seems to not be limiting capabilities like it normally does on this new client site: http://wetcenter.org/

    For example, editor level users who should not be able to see or activate plugins are able to do so.

    I've checked for plugin conflicts, but I'm not finding any.

    Other suggestions?

    http://wordpress.org/plugins/user-role-editor/

  2. Vladimir Garagulya
    Member
    Plugin Author

    Posted 6 months ago #

    Take into account that User Role Editor just changes roles and capabilities set at the WordPress database. WordPress enforces related users permissions itself. If user with "Editor" role starts see "Plugins" menu and may activate them, he has extended roles or capabilities set against the standard WordPress "Editor" role.
    Try to go to the users list and click "Capabilities" link under such user. Check if his capabilities list is matched with the "Editor" role's one.

Reply

You must log in to post.

About this Plugin

About this Topic

Tags

No tags yet.